Medium severity · published Jan 28, 2019
CVE-2018-19014
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
6.5
CVSS
0.8%
EPSS
No
On KEV
Description
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. Log files are accessible over an unauthenticated network connection. By accessing the log files, an attacker is able to gain insights about internals of the patient monitor, the location of the monitor, and wired network configuration.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Dräger Infinity Delta · ICS-CERT
Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions. · source: vendor
DX
Delta XL Firmware · Draeger
All versions, or not specified · source: NVD
ID
Infinity Delta Firmware · Draeger
All versions, or not specified · source: NVD
IE
Infinity Explorer C700 Firmware · Draeger
All versions, or not specified · source: NVD
KF
Kappa Firmware · Draeger
All versions, or not specified · source: NVD
Affected product
DI
Dräger Infinity Delta
ICS-CERT
More from Dräger Infinity Delta
7.8
CVE-2018-19012
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions
6.5
CVE-2018-19010
Drager Infinity Delta, Infinity Delta, all versions, Delta XL, all versions, Kappa, all version, and Infinity Explorer C700, all versions